Privacy Policy

1. Who we are

Khala Drive is an online car hire directory operating from Kenya. We decide how and why the personal data described here is used. Contact us at admin@khaladrive.co.ke or +254 119 673 436.

2. What we collect

From providers:

• your name, email address, phone / WhatsApp number, business name and location;
• your password (stored in scrambled form, never in plain text);
• vehicle details, prices and photos you upload;
• your plan and payment status. M-Pesa payments are processed by IntaSend; we receive the transaction reference, amount, phone number and result, but never your M-Pesa PIN;
• the date, version and IP address when you accept our Terms and Privacy Policy.

From people who contact us: your name, email, phone number and message when you use our contact form, WhatsApp or email.

From visitors: when someone taps the WhatsApp or Call button on a listing, we count that click against the provider and vehicle so providers can see their enquiries. We do not record the visitor’s name or number. We do not use advertising trackers. Logged-in providers get a session cookie so they stay signed in. Our pages load fonts from Google Fonts, which means Google receives your IP address when a page loads.

3. Why we use it

• to run provider accounts, show listings and process subscriptions (to perform our contract with providers);
• to show providers’ business details so customers can contact them (with the provider’s consent given at registration);
• to send service emails such as welcome messages, payment receipts and plan expiry reminders;
• to reply to enquiries, prevent fraud and keep the site secure (our legitimate interests);
• to keep records we are required to keep by law, such as accounting records.

4. What is public

On listings and provider pages we show: business name, location, phone / WhatsApp number, plan badge, and vehicle details and photos. Your email address and personal name are not shown publicly.

5. Who we share it with

We do not sell personal data. We share only what is needed with service providers that help us run Khala Drive: IntaSend (M-Pesa payments), Brevo (sending email), and our web hosting provider. We may also disclose information if the law or a court requires it, or to protect people from fraud or harm. Some of these providers may handle data outside Kenya, and we take steps to make sure it stays properly protected.

6. How long we keep it

We keep provider account data while your account exists and afterwards only for as long as needed, for example to meet accounting and legal requirements or to resolve disputes. Contact-form messages are kept for as long as needed to deal with your request.

7. Security

We use reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS) and hashed passwords. No online service is completely risk-free, so please choose a strong password and keep it private.

8. Your rights

Under the Data Protection Act, 2019 you can ask us to: see the personal data we hold about you; correct it; delete it; stop or limit how we use it; or give you a copy. You can also withdraw your consent at any time, for example by asking us to close your account and remove your listings. Email admin@khaladrive.co.ke and we will respond as soon as we reasonably can. If you are unhappy with our response, you can complain to the Office of the Data Protection Commissioner (odpc.go.ke).

9. Children

Khala Drive is not meant for anyone under 18, and we do not knowingly collect their data.

10. Changes

We may update this policy. The date at the top shows the latest version.